Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: eLCfPrOMmJ/JYCQLxZZZVarPWr9GiWtiX+rkyuiW3Ao=
Subject key identifier: A4:3D:9E:DC:64:78:65:8E:08:D2:DC:EA:22:BD:BD:18:53:D2:C2:A6
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 01A17D736ABBAE44B7D36B06A7C510C4B134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0AAE
Signing time: Tue 27 Oct 2026 13:01:18 +0000
Manifest this update: Tue 27 Oct 2026 13:01:18 +0000
Manifest next update: Wed 28 Oct 2026 13:01:18 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: L1du1393kWrKhHKRLCktzPTKTSp2PZBW89h7oITHyjA=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:6a:bb:ae:44:b7:d3:6b:06:a7:c5:10:c4:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Oct 27 13:01:18 2026 GMT
Not After : Oct 28 13:01:18 2026 GMT
Subject: CN=a43d9edc6478658e08d2dcea22bdbd1853d2c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:5f:ea:f2:63:a5:43:da:00:09:a6:04:7a:
98:fa:e8:b2:6a:67:48:c3:7e:af:51:6f:a3:4f:f5:
65:0e:b7:e9:09:b5:02:6d:46:40:fd:31:90:6d:d5:
f2:ba:bf:10:87:ba:ee:95:7d:03:59:67:4b:47:fb:
1f:e3:e4:85:ef:c0:b1:7a:cf:59:fb:6b:42:e2:dc:
d4:f9:c3:a7:ad:04:47:57:21:e7:b4:67:5a:6f:37:
8d:cb:c2:13:1f:d8:75:bf:79:56:cf:60:bb:de:12:
9d:ad:1e:c6:cb:cb:3e:67:1b:83:d5:c5:86:1f:a4:
11:fb:8a:35:1b:63:be:5c:ca:ed:c8:9b:cd:3a:59:
e4:df:c6:39:2d:47:a5:05:a2:bb:4a:e9:76:1f:b2:
15:b0:86:f5:14:10:4c:ac:a0:f5:5e:63:f6:86:c9:
01:62:2f:05:7a:41:68:ef:83:cb:87:e4:9c:f5:2d:
85:8f:85:06:84:8b:1d:97:4d:a3:45:3c:bc:15:a7:
64:58:e8:e5:09:bf:07:cb:d7:17:8c:48:b7:2a:6c:
97:20:09:21:c1:b4:8b:db:90:cd:75:fa:6d:ca:a4:
96:99:76:8d:d8:c9:cb:00:81:6f:91:83:c3:9c:17:
b7:8d:f1:f9:e0:15:26:41:4a:fd:5a:78:50:87:71:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:9E:DC:64:78:65:8E:08:D2:DC:EA:22:BD:BD:18:53:D2:C2:A6
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:96:3f:4e:44:82:81:93:21:1b:8c:a5:ff:6a:6e:f0:68:
c2:d2:58:3a:0e:74:cc:e7:78:96:18:19:a2:fd:c5:e2:62:04:
6d:fb:dc:41:6c:94:a2:be:93:69:d0:d4:7e:ff:11:16:22:93:
eb:7c:1e:a7:ad:f7:cc:66:86:52:72:21:aa:15:f7:7b:fa:d8:
f2:5f:12:89:28:77:64:c9:42:83:1f:a6:bd:ee:38:d9:bd:c1:
4c:2d:b0:3e:24:61:d2:4c:b7:80:b7:40:c0:c5:0b:a6:af:52:
4a:71:f2:08:43:eb:7c:72:3c:65:e8:ff:38:a5:37:6f:35:b8:
ca:e6:53:5c:ba:62:ed:a6:9d:27:50:e5:55:23:2e:85:4a:2f:
d8:c4:54:3e:9f:ed:d8:13:d5:99:14:fd:0f:a1:72:89:11:9b:
a3:36:7b:a1:3c:67:90:5a:d4:96:9a:32:ba:29:79:d2:7b:6d:
01:16:83:72:0a:9f:b4:d5:f4:d2:ed:73:bf:e4:14:4c:77:3f:
33:cb:e6:4c:1e:27:3a:1c:eb:e3:3b:61:02:fa:69:77:af:8a:
d1:10:8b:af:3e:43:1e:a9:4f:aa:8f:a1:d4:29:8a:28:c3:b1:
e8:b2:b5:dc:20:25:45:f8:c5:1a:8a:c9:67:f6:83:60:83:d6:
ca:45:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:33 2026 by rpki-client